Freeipa docker with Traefik docker

[Sami Hulkko]

Hi,

Is there anyone who could point me into some info about this matter of 
having Freeipa Docker behind Traefik Docker reverse proxy? I could not 
make it work with both dockers on same machine. I got 404 from Traefik 
and with extensive search found only one post chain about the problem. 
My wild guess is that due to the large number of open ports on Freeipa 
Docker the Traefik proxy gets confused.

There is also the issue of certificates, if one uses Letsencrypt certs 
for IPA frontend (www) and these certificates must be inside Docker 
container (ipa cert install....) the certs on Traefik can get off-sync 
with IPA ones.  Now I have them with certmonger from Letsencrypt with 
deploy-hooks script installing them automatically into IPA Docker & 
reboots the docker.

-- 
Me worry? That's why my first CD was Peter Gabriel SO....

Sami Hulkko
sahulkko(a)gmail.com
sahulkko(a)icloud.com
samihulkko(a)quantum-black-hole.com
[phone]

[Sami Hulkko]

Replying to my own,

https://docs.docker.com/config/daemon/systemd/#httphttps-proxy

The setting up of Docker daemon to support proxy server did not appear 
in _any_of_the_12_hour_searches. The reason for failures is most likely 
this.

SH

On 24/09/2022 09:53, Sami Hulkko via FreeIPA-users wrote:
>  Hi,
>
>  Is there anyone who could point me into some info about this matter of 
>  having Freeipa Docker behind Traefik Docker reverse proxy? I could not 
>  make it work with both dockers on same machine. I got 404 from Traefik 
>  and with extensive search found only one post chain about the problem. 
>  My wild guess is that due to the large number of open ports on Freeipa 
>  Docker the Traefik proxy gets confused.
>
>  There is also the issue of certificates, if one uses Letsencrypt certs 
>  for IPA frontend (www) and these certificates must be inside Docker 
>  container (ipa cert install....) the certs on Traefik can get off-sync 
>  with IPA ones.  Now I have them with certmonger from Letsencrypt with 
>  deploy-hooks script installing them automatically into IPA Docker & 
>  reboots the docker.
>
>
>  _______________________________________________
>  FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
>  To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>  Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
-- 
Me worry? That's why my first CD was Peter Gabriel SO....

Sami Hulkko
sahulkko(a)gmail.com
sahulkko(a)icloud.com
samihulkko(a)quantum-black-hole.com
[phone]